Oracle Errata System
Oracle Linux
5.11
2026-07-07T11:16:05
ELSA-2026-33577: ruby:4.0 security update (IMPORTANT)
Oracle Linux 9
ruby
[4.0.3-33]
- Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245)
Resolves: RHEL-181690
- Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246)
Resolves: RHEL-181771
- Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258)
Resolves: RHEL-181803
[4.0.3-32]
- Upgrade to Ruby 4.0.3.
Resolves: RHEL-171933
- Fix ERB: Arbitrary code execution via deserialization bypass
(CVE-2026-41316)
Resolves: RHEL-171258
- Fix JSON: Denial of Service or Information Disclosure via format string injection
(CVE-2026-33210)
Resolves: RHEL-173458
rubygem-mysql2
[0.5.7-1]
- Upgrade to mysql2 0.5.7.
Related: RHEL-142278
rubygem-pg
[1.6.3-1]
- Upgrade to pg 1.6.3
Related: RHEL-142278
IMPORTANT
Copyright 2026 Oracle, Inc.
CVE-2026-42245
CVE-2026-42246
CVE-2026-42258
cpe:/a:oracle:linux:9::appstream
ruby-doc
rubygem-minitest
rubygem-rss
rubygem-power_assert
rubygem-racc
rubygem-io-console
rubygem-irb
rubygem-mysql2
rubygem-bundler
rubygem-json
ruby-libs
rubygem-pg
rubygems
rubygem-pg-doc
ruby-devel
rubygem-rexml
rubygem-test-unit
ruby-bundled-gems
rubygem-bigdecimal
ruby
rubygem-typeprof
rubygem-psych
oraclelinux-release
ruby-default-gems
rubygem-rdoc
rubygem-rake
rubygem-rbs
rubygem-mysql2-doc
rubygems-devel
/etc/dnf/modules.d/ruby.module
\[ruby\][\w\W]*
1
bc4d06a08d8b756f
\nstream\s*=\s*4\.0\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*4\.0\b
^9
aarch64
0:4.0.3-33.module+el9.8.0+90938+383082f5
0:4.0.1-33.module+el9.8.0+90938+383082f5
0:4.0.6-33.module+el9.8.0+90938+383082f5
0:0.8.2-33.module+el9.8.0+90938+383082f5
0:1.16.0-33.module+el9.8.0+90938+383082f5
0:2.18.0-33.module+el9.8.0+90938+383082f5
0:6.0.0-33.module+el9.8.0+90938+383082f5
0:0.5.7-1.module+el9.8.0+90938+383082f5
0:1.6.3-1.module+el9.8.0+90938+383082f5
0:3.0.1-33.module+el9.8.0+90938+383082f5
0:5.3.1-33.module+el9.8.0+90938+383082f5
0:1.8.1-33.module+el9.8.0+90938+383082f5
0:13.3.1-33.module+el9.8.0+90938+383082f5
0:3.10.0-33.module+el9.8.0+90938+383082f5
0:7.0.3-33.module+el9.8.0+90938+383082f5
0:3.4.4-33.module+el9.8.0+90938+383082f5
0:0.3.2-33.module+el9.8.0+90938+383082f5
0:3.7.5-33.module+el9.8.0+90938+383082f5
0:0.31.1-33.module+el9.8.0+90938+383082f5
x86_64